Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier: febAF/yoQcKk2/WI1tbR/NljBtfcEBtiM3Q1dhpa4dg=
Subject key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: E2B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Thu 23 Oct 2025 03:12:14 +0000
Certificate not after: Fri 23 Oct 2026 03:01:03 +0000
Subordinate resources: AS: 151291
IP: 49.128.4.0/22
IP: 103.31.236.0/22
IP: 103.244.116.0/22
IP: 223.29.252.0/22
IP: 2403:6380::/32
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 13:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58035 (0xe2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Validity
Not Before: Oct 23 03:12:14 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151291
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.31.236.0/22
103.244.116.0/22
223.29.252.0/22
IPv6:
2403:6380::/32
Signature Algorithm: sha256WithRSAEncryption
21:f3:21:e6:e9:7b:da:85:32:7e:ad:f1:ea:42:d5:75:ae:c8:
8d:ae:b8:47:67:bc:53:c5:63:5f:f1:11:3c:aa:9a:e6:53:93:
a6:c7:c7:c9:b4:29:fe:ea:7a:be:ce:36:03:f1:57:b9:53:e7:
ef:74:b0:d6:61:d0:f9:c0:91:55:0b:67:8f:e0:d7:24:58:a4:
6c:5b:45:2d:39:f6:57:d8:c8:9a:81:1b:e3:10:2b:f9:2f:15:
5b:75:6e:46:e1:b2:a4:7f:49:bb:d5:6e:ac:23:ac:75:55:b0:
b6:3f:95:ad:82:4c:32:65:29:47:cc:bd:58:74:6b:ed:96:92:
54:26:e3:40:83:b9:bc:da:dd:8d:28:d6:5f:4d:1e:59:1d:15:
70:53:31:0d:20:44:7e:b9:c8:ed:fa:c5:5f:8f:8f:94:d5:d2:
8d:53:ef:f5:17:a2:32:33:bf:64:0a:b1:21:e4:c0:a6:1d:d7:
da:a3:db:ea:5b:b2:fc:d9:49:d5:ca:63:45:ab:e3:53:6a:05:
14:74:a0:60:01:70:df:d0:ad:f0:bf:7c:50:8d:87:8b:a5:31:
26:ec:fd:95:5f:86:22:c6:27:be:0b:4f:3d:91:e9:8a:60:fc:
98:2b:25:22:0c:6d:ee:64:e6:94:42:e4:6f:e8:dc:a2:d7:4b:
02:a5:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:50:27 2025 by rpki-client